Quietstack Privacy Policy
Last updated: 7/2/2025
1. Who We Are
Quietstack is a U.S.-based automation and messaging platform helping small businesses streamline review and referral requests through SMS and email flows. Our services are developed and operated by Thrum Trace, based in Austin, Texas.
Questions? Contact us at: support@quietstack.com
2. What We Collect
We collect only the data necessary to deliver and improve our services:
- Client information: name, email, phone, business name 
- End-customer information: names, emails, phone numbers 
- Message content: review and referral texts, survey responses 
- Delivery logs: message status and send times 
We do not collect:
- Payment details (handled by Stripe) 
- Health, biometric, or sensitive personal data 
- Behavior tracking across unrelated websites 
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
3. How We Use Your Data
Your data is yours. We use it only to:
- Set up and deliver SMS/email messaging flows 
- Track delivery and automate retries 
- Improve performance based on anonymized trends 
- (Planned) Enhance messages with AI suggestions 
- (Planned) Launch optional marketing integrations (e.g., Facebook Pixel) 
4. Legal Basis for Processing
We process your data based on:
- Your consent (accepting terms, submitting forms) 
- Legitimate interest (delivering services you requested) 
- Legal obligations (e.g., honoring opt-out requests) 
5. Your Rights (U.S. Residents)
You can:
- Access, update, or delete your data 
- Opt out of SMS/email communications 
- Request complete account deletion 
Contact: compliance@quietstack.com
6. Data Retention
- Customer data: deleted after 18 months of inactivity 
- Message logs: retained for up to 13 months (per Twilio policy) 
- Scenario logs (Make.com): up to 30 days 
7. Sub-Processors
We partner with trusted vendors who process data on our behalf:
Sub-ProcessorPurposeLocationTwilioSMS delivery and logsUSAAirtableData storage and logicUSAMake (Celonis)Scenario automationEU / USAGoogle WorkspaceInternal email & documentsUSAStripePayment processingUSA
All sub-processors are contractually bound to maintain GDPR- and CCPA-compliant security standards.
8. Cookies & Tracking
Currently, Quietstack does not use cookies or tracking pixels. If we introduce analytics or marketing tools (like Google Analytics or Meta Pixel), we will:
- Display a cookie banner upon visit 
- Request your consent before placing non-essential cookies 
9. Security
We take security seriously:
- All data is transmitted over encrypted HTTPS 
- Role-based access control for sensitive data 
- 2FA and backups for all admin accounts 
In the event of a breach, we’ll notify affected users within 72 hours as required by law.
10. Deletion & Contact
Want your data deleted or exported? Email us at: support@quietstack.com.
TL;DR – Your Data, Your Rules We never sell or rent your information. We collect only what’s necessary to run our service, and you can opt out or delete your data anytime.
Terms of Use
Last updated: [Insert Date]
By using Quietstack, you agree to:
- Only use our services for legal and ethical business purposes 
- Respect message frequency and consent requirements for your customers 
- Not repurpose or resell the platform or flows without written permission 
We reserve the right to suspend or terminate accounts that abuse the system, violate SMS/email regulations, or engage in deceptive practices.
Payment terms are monthly or annual as selected. Cancellation takes effect at the end of your billing period.
We may occasionally update these terms to reflect product changes, compliance updates, or better clarity. When we do, we’ll notify active users via email or in-app notice.
For any questions, email us at hello@getquietstack.com.
